apostrophe.goprimer.com

Issued by R3

About this certificate

This digital certificate with serial number 03:70:47:c8:13:84:8f:51:d8:53:2b:4e:13:0a:80:07:93:c8 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apostrophe.goprimer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:47:c8:13:84:8f:51:d8:53:2b:4e:13:0a:80:07:93:c8
Serial Number (int): 299543896933366539062497363198127037191112
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:ef:a6:78:31:aa:4f:49:9f:02:f9:08:12:2f:30:d1:66:47:9f:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2f:18:66:7f:a9:4a:40:4f:33:88:35:55:13:54:ba:7f:7d:4a:de:bc
Fingerprint (sha256): 4e:33:f7:92:42:33:3e:96:31:e0:13:67:29:23:03:bb:07:a0:8d:95:fe:07:2a:46:1d:b5:e8:b5:4c:14:fa:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apostrophe.goprimer.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apostrophe.goprimer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apostrophe.goprimer.com
atolla.goprimer.com
billcom.goprimer.com
buy.kettleandfire.com
buy.letsbld.com
buy.nomnomnow.com
cameo.goprimer.com
cuemath.goprimer.com
curalife.goprimer.com
cushion.goprimer.com
cutbackcoach.goprimer.com
diversyfund.goprimer.com
evernow.goprimer.com
explore.wineaccess.com
felixforyou.goprimer.com
fiton.goprimer.com
forhims.goprimer.com
gainful.goprimer.com
get.fitonapp.com
get.forhims.com
get.metabolicrenewal.com
get.monarchmoney.com
get.montikids.com
get.noom.com
get.tulipcremation.com
get.ubiome.com
go.gainful.com
hawthorne.goprimer.com
invest.diversyfund.com
katkin.goprimer.com
kettleandfire.goprimer.com
langehair.goprimer.com
lastbrand.goprimer.com
lifeprofitness.goprimer.com
liveclass.cuemath.com
metabolicrenewal.goprimer.com
mixbook.goprimer.com
modernfertility.goprimer.com
monarchmoney.goprimer.com
montikids.goprimer.com
mysteryscience.goprimer.com
nomnomnow.goprimer.com
otter.goprimer.com
papaandbarkley.goprimer.com
peachystudio.goprimer.com
picsart.goprimer.com
radfordbeauty.goprimer.com
rb.victoriaradford.com
rocksbox.goprimer.com
sans.goprimer.com
secure.goprimer.com
sfox.goprimer.com
shop.lastbrand.com
signup.bill.com
start.bungalow.com
start.farmsteadapp.com
start.getsunday.com
subscribe.rocksbox.com
sunday.goprimer.com
supercoffee.goprimer.com
thefeed.goprimer.com
therapynotebooks.goprimer.com
triplebyte.goprimer.com
trufora.goprimer.com
try-app.go.insure
try.apostrophe.com
try.atolla.co
try.breathesans.com
try.cameo.com
try.curalife.com
try.cushion.ai
try.cutbackcoach.com
try.drinksupercoffee.com
try.evernow.co
try.felixforyou.ca
try.forhers.com
try.hawthorne.co
try.katkin.club
try.langehair.com
try.lifeprofitness.com
try.madison-reed.com
try.mixbook.com
try.modernfertility.com
try.mysteryscience.com
try.otter.ai
try.pbtopicals.com
try.peachystudio.com
try.picsart.com
try.sanebox.com
try.sfox.com
try.thefeed.com
try.therapynotebooks.com
try.triplebyte.com
try.trufora.com
try.upstep.com
try.wildfang.com
upstep.goprimer.com
wildfang.goprimer.com
wineaccess.goprimer.com

Other certificates including the domain name goprimer.com

(limited to 100 certificates)
apostrophe.goprimer.com
tls.automattic.com
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
getapp.in
getapp.in
5000772504.goprimer.co
allwellbeauty.goprimer.com
alphalion.goprimer.com
apostrophe.goprimer.com
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
alphalion.goprimer.com
allwellbeauty.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
aj1.goprimer.co
getapp.in
goprimer.com
buy.letsbld.com
apostrophe.goprimer.com
tls.automattic.com
getapp.in
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
agirlnamedotis.goprimer.com
aj1.goprimer.co
goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
alphalion.goprimer.com
alphalion.goprimer.com
buy.letsbld.com
tls.automattic.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
ios.goprimer.com
allwellbeauty.goprimer.com
*.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
help.goprimer.com
apostrophe.goprimer.com
apostrophe.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
agirlnamedotis.goprimer.com
getapp.in
getapp.in
ios.goprimer.com
android.goprimer.com
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
tls.automattic.com
allwellbeauty.goprimer.com
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
tls.automattic.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
allwellbeauty.goprimer.com
alphalion.goprimer.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
aj.goprimer.co
getapp.in
apostrophe.goprimer.com
alphalion.goprimer.com
getapp.in
apostrophe.goprimer.com
help.goprimer.com
5000772504.goprimer.co
alphalion.goprimer.com
tls.automattic.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in

Certificate

The complete raw certificate details for apostrophe.goprimer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZXheKQncKYAvo6AnWW9
jsViEnUOSs5SDJLPe/NZMTAX87nsyKqdPOYD+ICvnQ0nb4d4zQmMFlFIdfBTF0nM
Y4FzGfwqsnt4rDJarrU9p48LrB+I7ScRLmNOt0WVX4E/5aeBpfFGUd8+4uNAEj2N
M4xtfJs+LTZcqo8Soep3NAdejOwdRCzMSbS0pDbz2DxGU2YTQP0j49oDhrZztuS1
jFiSSc6+TkpDRPRJY7+FqA9aLW9BUbeKvUSoDhmsbI2BhElXWY7A13anY+goD+8Z
L8pXVXrITUHhkMAAmtjhgE0CthfG85wQQ6YVTybT/91/ToN3Aox7u/8kxj+46tON
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299543896933366539062497363198127037191112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-16 19:52:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-15 19:52:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apostrophe.goprimer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25447808249191712514473742454830979684793395747592599384444913273190008846400126672494440164072027263721072135441019409490781833378103132458890864726632728201741252824103018091930139604155590623153018490358317130588839523769992776900950317565849674465918788716546327493561293910063764662909484955517645713643384906444296476818701181760305269163559041338931132748724995245045258213561353951064860055249399444625101183110712247472738890404372291300461725150549936931226134126613253216777210766978773495025442752721845295887167290482127222498171861486562945226468334625386681755907438643743655888125420630184414187589113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fefa67831aa4f499f02f908122f30d166479fb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostrophe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atolla.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billcom.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.kettleandfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.letsbld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.nomnomnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameo.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuemath.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curalife.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cushion.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutbackcoach.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversyfund.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.wineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felixforyou.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiton.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forhims.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainful.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fitonapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.forhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.metabolicrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.monarchmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.montikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.noom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.tulipcremation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.ubiome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gainful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawthorne.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.diversyfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katkin.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kettleandfire.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langehair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastbrand.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeprofitness.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveclass.cuemath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicrenewal.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mixbook.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernfertility.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarchmoney.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montikids.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysteryscience.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomnomnow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papaandbarkley.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachystudio.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picsart.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radfordbeauty.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rb.victoriaradford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocksbox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sans.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lastbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.bill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.bungalow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.farmsteadapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.getsunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.rocksbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunday.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercoffee.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefeed.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapynotebooks.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triplebyte.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trufora.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-app.go.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.apostrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.atolla.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.breathesans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cameo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.curalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cushion.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cutbackcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.drinksupercoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.felixforyou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.forhers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.hawthorne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.katkin.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.langehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifeprofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.madison-reed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mixbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.modernfertility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mysteryscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.otter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.pbtopicals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.peachystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.sanebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.sfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.thefeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.therapynotebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.triplebyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.trufora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.upstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.wildfang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstep.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfang.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineaccess.goprimer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000178dc749c93000004030047304502207222113445e6f63b97eefe6cb61cc3d35145583fed1176a532ed087d3a6c459c022100836d6f982cc2edf40336f024fda967ccfacf4a7a63a3d4ad102a45f6bf01f5c30077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178dc749d6a0000040300483046022100ece705baa12f356abea8f4ffc0534c6dc398db715460cd3097ff7776c557b55b0221008bb441b888f5f8d563048b589538f46cd3496d407e557b5e85dc9d68e705c834
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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